Merge pull request #24 from gwleuverink/enhancement/osx-build-codesigning

Automate code signing & notarization

Author: gwleuverink

build/entitlements.mac.inherit.plist

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+    <key>com.apple.security.network.client</key>
+    <true/>
+  </dict>
+</plist>

env.example

@@ -0,0 +1,5 @@
+# Apple env vars used for code signing locally. Will be injected by CI on automated builds
+APPLE_ID=
+APPLE_ID_PASSWORD=
+
+VUE_APP_SENTRY_DSN=

notarize.js

@@ -0,0 +1,37 @@
+// "afterSign": "./afterSignHook.js",
+
+require('dotenv').config();
+const fs = require('fs');
+const path = require('path');
+var electron_notarize = require('electron-notarize');
+
+module.exports = async function (params) {
+    if (process.platform !== 'darwin') {
+        return;
+    }
+
+    console.log('afterSign hook triggered', params);
+
+    let appId = 'nl.gwleuverink.clickup-time-tracker'
+
+    let appPath = path.join(params.appOutDir, `${params.packager.appInfo.productFilename}.app`);
+    if (!fs.existsSync(appPath)) {
+        console.log('skip');
+        return;
+    }
+
+    console.log(`Notarizing ${appId} found at ${appPath}`);
+
+    try {
+        await electron_notarize.notarize({
+            appBundleId: appId,
+            appPath: appPath,
+            appleId: process.env.APPLE_ID,
+            appleIdPassword: process.env.APPLE_ID_PASSWORD,
+        });
+    } catch (error) {
+        console.error(error);
+    }
+
+    console.log(`Done notarizing ${appId}`);
+};

package-lock.json

@@ -1,6 +1,6 @@
 {
   "private": true,
-  "version": "0.2.0",
+  "version": "1.0.0",
   "name": "clickup-time-tracker",
   "productName": "Time Tracker",
   "description": "A tool for painlessly tracking time on Clickup tasks",
@@ -24,6 +24,7 @@
     "postinstall": "electron-builder install-app-deps",
     "postuninstall": "electron-builder install-app-deps"
   },
+  "main": "background.js",
   "dependencies": {
     "@heroicons/vue": "^1.0.5",
     "@sentry/electron": "^3.0.7",
@@ -45,8 +46,10 @@
     "@vue/compiler-sfc": "^3.0.0",
     "autoprefixer": "^10.4.7",
     "babel-eslint": "^10.1.0",
+    "dotenv": "^16.0.1",
     "electron": "^18.0.0",
     "electron-devtools-installer": "^3.2.0",
+    "electron-notarize": "^1.2.1",
     "eslint": "^7.5.0",
     "eslint-plugin-vue": "^9.1.1",
     "postcss": "^8.4.14",

package.json

@@ -6,23 +6,28 @@ module.exports = {
         electronBuilder: {
             nodeIntegration: true,
             preload: 'src/preload.js',
-            productName: 'Time Tracker',
+            productName: 'ClickUp Time Tracker',
             artifactName: 'time-tracker-${version}-${os}-${arch}.${ext}',
             builderOptions: {
                 publish: [
                     { provider: 'github', private: false, releaseType: 'release' },
                 ],
 
                 mac: {
+                    target: [ "dmg" ],
                     hardenedRuntime: true,
                     category: "public.app-category.productivity",
-                    target: [ "dmg" ],
+                    entitlements: "./build/entitlements.mac.inherit.plist",
+                    entitlementsInherit: "./build/entitlements.mac.inherit.plist",
                 },
 
                 linux: {
                     target: ["AppImage"],
                     executableName: 'Time Tracker',
                 },
+
+                appId: 'nl.gwleuverink.clickup-time-tracker',
+                afterSign: './notarize.js'
             }
         }
     },